PT-2026-30384 · Tenda · M3

Doma · Published 2026-04-04 · Updated 2026-04-05 · CVE-2026-5567

NVD

CVSS v2.0

9.0

High

AV:N/AC:L/Au:S/C:C/I:C/A:C

A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

CWE-120

Related Identifiers

CVE-2026-5567

Affected Products

M3

References · 7

• 🔥 https://github.com/Moxxkidd/CVE/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5567 · Security Note
• https://vuldb.com/submit/782999 · Note
• https://vuldb.com/vuln/355337/cti · Note
• https://tenda.com.cn · Note
• https://vuldb.com/vuln/355337 · Note
• https://twitter.com/vuldb/status/2040474508516303119 · Twitter Post